AI Finds So Many Linux Bugs, Canonical Changes to a Two-Week Stable Release Update Cycle

“Finding vulnerabilities faster also puts pressure on Linux distributions to fix and deliver patches faster,” writes Slashdot reader BrianFagioli

AI has transformed bug discovery from “a manual, time-intensive process into a highly automated engine,” notes Canonical’s blog, leading to a “recent explosion in the volume of CVEs”.

Additionally, the upstream kernel community became its own CVE Numbering Authority (CNA) and assigned CVE (Common Vulnerabilities and Exposures) identifiers to thousands of bugs, arguing that at the kernel level, almost any type of bug that can affect a running system, could potentially be classified as a vulnerability. As a result, the volume of CVEs has skyrocketed exponentially, creating a massive backlog of alerts and forcing defenders to drastically increase the speed of their fixes to close the window of risk.

To address the growing volume of CVEs and the demand for faster security fixes, we are transitioning to a unified, 2-week release cycle…

While a patch is being prepared, Canonical aims to provide safe workarounds where applicable, so users aren’t left exposed in the meantime. Where no safe workaround exists, Canonical will say so clearly and point users toward general hardening steps instead. The goal is to get environments into a defensible, safer state within 24 to 48 hours of public disclosure — well before a patch ships. This doesn’t replace the patch; it buys the time needed to fix the vulnerability properly, without sacrificing security.

“Linux did not suddenly become wildly insecure overnight,” notes the blog Nerds.xyz. “We are getting much better at finding and cataloging problems that may have previously gone unnoticed.”

There is something almost ironic about all of this. AI is routinely pitched as a tool that will make software development faster, but it is also making vulnerability discovery faster. That means maintainers now have to accelerate the other side of the equation too.
For Ubuntu users, that should ultimately be good news. More bugs being discovered is preferable to vulnerabilities sitting unnoticed in the Linux kernel.


Read more of this story at Slashdot.

Roku QLED 4K And Gorgeous LG C6H OLED TVs Are Up To Thousands Off At Best Buy

Roku QLED 4K And Gorgeous LG C6H OLED TVs Are Up To Thousands Off At Best Buy
This is a great time to be in the market for a TV, especially one of Roku’s models. The deal to beat is still Roku’s new 65-inch Pro Series OLED TV for $799.99 after applying a hidden coupon code (it still works), as we outlined on Friday, but there are also bargains to be had on Roku’s mini LED Pro TVs.
Roku’s 65-Inch Pro Series 4K QLED

Roku QLED 4K And Gorgeous LG C6H OLED TVs Are Up To Thousands Off At Best Buy

Roku QLED 4K And Gorgeous LG C6H OLED TVs Are Up To Thousands Off At Best Buy
This is a great time to be in the market for a TV, especially one of Roku’s models. The deal to beat is still Roku’s new 65-inch Pro Series OLED TV for $799.99 after applying a hidden coupon code (it still works), as we outlined on Friday, but there are also bargains to be had on Roku’s mini LED Pro TVs.
Roku’s 65-Inch Pro Series 4K QLED

GDB 18.1 released

Version 18.1 of the GDB interactive debugger has been released. Changes
include new commands to manipulate the environment of the subprocess, the
ability to save the command history to a file, support for a couple of new
targets, several Python API additions, and more. See the
NEWS file
for the complete list.

Is GTA 6 Coming To Nintendo Switch 2? Ex-Rockstar Dev Drops Bold Claim

Is GTA 6 Coming To Nintendo Switch 2? Ex-Rockstar Dev Drops Bold Claim
One of the big questions surrounding Grand Theft Auto VI is when it will inevitably get ported to PC, and developer Rockstar Games does not seem keen on tipping its hand. Another area of interest is whether GTA VI will find its way to Nintendo’s popular Switch 2 handheld. So far, Rockstar has only confirmed releases for the PlayStation 5 and